AI2 has two VPN options available: PriTunl and TunnelBlick. PriTunl is the preferred option, only use TunnelBlick if something prevents you from using PriTunl.
MacOS:
Connect via the PriTunl Client
The Profile URI Link on the login page only lasts a few minutes, so unless you're really fast, you'll have to log in a second time. The instructions will guide you through that.
Go to pritunl.allenai.org
Select Sign in with Google
Select your @allenai.org GSuite account
Select Download Client, follow the installation instructions
Close the pritunl.allenai.org browser tab (see note above as to why)
Go back to pritunl.allenai.org and log in again
Open the Pritunl application
Copy the Profile URI Link
Start the PriTunl client (if it hasn't already been started)
Select Import Profile URI
Paste the URI and press Import
You can use the “hamburger” menu in the top right corner of each profile to connect to and disconnect from the VPN.
You will see three AI2 VPNs in the Pritunl client:
pritunl.allenai.org - This profile is intended for computers running MacOS. It will only route traffic destined for the corporate network through the VPN. All other traffic will continue to route through your local network.
pritunl.allenai.org-alltraffic - This profile is intended for computer running MacOS. This will route all traffic through the VPN. Some project team members (formerly VPT) may need this to connect to cloud resources. Use this only if you require it.
pritunl.allenai.org-windows - This profile is specifically configured to be used on Windows computers. It will only route traffic destined for the corporate network through the VPN. All other traffic will continue to route through your local network.
Windows Users:
If you are using a Windows laptop, you should be using the built in VPN protocol to log in. If you have not been set up to log in to your laptop via “Network Sign-in” please reach out to IT in the #it slack channel
MacOS (Alternate Setup)
Connect via Tunnelblick (MacOS Only)
Install the Tunnelblick (MacOS) client (you may skip this step if it's already installed)
Skip the config file installation if asked - that comes later
Go to pritunl.allenai.org
Select Sign in with Google
Select your @allenai.org GSuite account
Select Show More
Select Download Profile (pritunl.allenai.org) (the thin, blue option)
Download the .ovpn file and open it
Tunnelblick/OpenVPN will guide you through the rest of the installation. If you have issues installing the client or messages appear when connecting, see the Troubleshooting section below.
Windows (Built in VPN solution)
Please review the Domain Join/VPN steps to set up your laptop to automatically connect to VPN on Windows. If you have any questions, don’t hesitate to reach out to IT on the #it slack channel
Troubleshooting
Routing All Traffic Through the VPN using Tunnelblick
If you want to route all traffic over the VPN, make a copy of the configuration as follows
Click the Tunnelblick icon and select "VPN Details..."
Select "AllenAI", click the gear icon on the bottom of the list and choose "Duplicate Configuration..."
Select the new configuration and press the "Advanced..." button
Press the "While Connected" tab and click the "Route all traffic through the VPN" checkbox
Close the windows and connect
Problem Loading System Extension
If you get one of the following messages:
Tunnelblick was not able to load a system extension that is needed to connect to ...
System Extension Blocked: A program tried to load new system extension(s) signed by "Jonathan Bullard"
Follow the instructions here to resolve the problem. (H/T Miles)
Tunnelblick Connection Messages
If you get a message that complains about one of the following, you may ignore it:
comp-lzo compression deprecation
Apparent IP address changing or not changing
Error when trying to log in to pritunl.allenai.org
401: Unauthorized - Make sure you are logging in with your http://allenai.org email address, not a personal email address
403: Forbidden - Your account most likely has not been enabled. Please reach out to IT and request your account be enabled in Pritunl